Unprivileged user namespaces

A Linux feature that lets ordinary users create namespaces in which they hold root-like capabilities. Container tooling depends on it, and kernel exploits frequently use it to reach privileged code paths.